dd-trace-cpp vulnerabilities

2 known vulnerabilities in dd-trace-cpp from DataDog. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  dd-trace-cpp: Allocation of Resources Without Limits or Throttling

  CVE-2026-50277Sep 17, 2026DataDog

  dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming W3C baggage headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES on the extraction path, even though those limits are en

• 7.5 High severity

  dd-trace-cpp is the Datadog distributed tracing for C++.

  CVE-2024-38525Jun 28, 2024DataDog

  dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the `nlohmann` JSON library. However, due to the way the JSON library